media-access

Overview ¶

Command media-access is the media access agent (media/agent). Settings are flags or their environment variables; secrets are environment only, each also readable from a file named by {VAR}_FILE:

-listen        MEDIA_ACCESS_LISTEN          default :8080
-s3-endpoint   MEDIA_ACCESS_S3_ENDPOINT     path-style S3 endpoint (RGW or MinIO)
-s3-bucket     MEDIA_ACCESS_S3_BUCKET
-s3-region     MEDIA_ACCESS_S3_REGION       default us-east-1
-hosts         MEDIA_ACCESS_HOSTS           required: each media host and the namespaces it serves,
                                            e.g. "media.doujins.ai=doujins,accounts; media.hanime.media=hentai0,accounts"
-cors-origins  MEDIA_ACCESS_CORS_ORIGINS    comma list of exact site origins allowed with credentials,
                                            e.g. https://doujins.ai; empty breaks hls.js (warned)
-defaults      MEDIA_ACCESS_DEFAULTS        public names that fall back to the kind's _default item,
                                            e.g. "doujins/gallery: cover-{w}.webp; accounts/user: avatar-{w}.webp"
               MEDIA_ACCESS_S3_ACCESS_KEY_ID, MEDIA_ACCESS_S3_SECRET_ACCESS_KEY   key reading only */private/* and */public/*
               MEDIA_ACCESS_TOKEN_KEY           current signing key "{kid}:{base64 secret}"
               MEDIA_ACCESS_TOKEN_KEY_PREVIOUS  previous key, accepted during rotation; optional